ZuriHac 2025 - project / collaboration ideas

Gautier (@blackheaven) will attend ZuriHac (possibly a couple other SRT members, not confirmed).

This ticket is a bag-of-holding for specific projects or collaboration ideas for ZuriHac. Share/discuss your ideas below and we will make a list here in the issue description.

## Good first issue / beginner friendly

- A simple refactor: https://github.com/haskell/security-advisories/issues/253
- Follow up on the OSV "canonical source / how to edit" ask - https://github.com/haskell/security-advisories/issues/252
- Ecosystem library review, i.e. for particular security-related use cases, what libs are there. Can we do a list with commentary?

## Intermediate

- Implement the namespaces proposal: https://github.com/haskell/security-advisories/issues/240
- Additional CVSS metrics (temporal) - https://github.com/haskell/security-advisories/issues/226

## For the brave

- Finish the CVSS 4.0 support - https://github.com/haskell/security-advisories/issues/167
- GitHub bot to assist SRT (and contributors) with reviewing advisory PRs - https://github.com/haskell/security-advisories/issues/57

## Broader ecosystem efforts

- SBOM (@MangoIV started something, IIRC)
- Renovate (what is the status? write a guide? @ysangkok led the development)
- cabal-audit - what is the status? what work can be done?

Start by reviewing the linked issues for the beginner, intermediate, and advanced ideas, especially issues 253, 252, 240, 226, 167, and 57. The issue is a discussion list rather than a scoped task, so done would require selecting one proposal and defining its implementation and completion criteria.

Written by the indexing model from the issue text.